Information Security Analyst

Responsibilities

• Perform hands-on Application Security assessments including SAST, DAST, SCA, and manual code reviews.
• Identify, analyze, and remediate vulnerabilities in web, mobile, and API applications (OWASP Top 10).
• Lead Software Supply Chain Security initiatives, including dependency management, SBOM generation, and secure CI/CD pipelines.
• Conduct threat modeling for applications and integration points.
• Review and secure build pipelines, container images, and third-party libraries.
• Collaborate with development, DevOps, and infrastructure teams to embed security into the SDLC.
• Monitor and triage security findings from various AppSec tools.
• Support Cloud Security posture reviews, including IAM and network security.

Requirements

• 1-3 years of experience in Cybersecurity with strong hands-on exposure in Application Security.
• Practical experience in Software Supply Chain Security (SCA tools, dependency analysis, SBOM).
• Basic to working knowledge of Cloud Security (AWS, Azure, or GCP).
• Bachelor’s degree in Computer Science, IT, Cybersecurity, or an equivalent field.
• Proficiency with AppSec tools such as SonarQube, Semgrep, Burp Suite, Snyk, or Black Duck.
• Understanding of OWASP Top 10, CWE, CVE, and secure coding practices.

Preferred Qualifications

• Experience with Docker/container security and CI/CD pipeline security.
• Familiarity with SBOM formats like CycloneDX or SPDX.
• Basic scripting skills in Python or Bash.

Benefits

• Health & Wellness coverage designed for mind and body.
• Flexible downtime and generous time off.
• Continuous learning resources and career growth opportunities.
• Competitive pay and retirement planning.
• Family-friendly perks and financial wellness programs.

About the Company

S&P Global delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies, and expertise they need to move ahead and solve complex challenges in a changing economic landscape.